Abort in uv__io_poll
renatahodovan opened this issue · comments
Renáta Hodován commented
IoT.js version:
Checked revision: a7e1552
Build command: ./tools/build.py --clean --buildtype=debug --jerry-profile=es2015-subset
OS:
Linux-4.15.0-43-generic-x86_64-with-Ubuntu-18.04-bionic
Test case:
var fs = require('fs');
fs.close(4, function() { });
Backtrace:
Thread 1 "iotjs" received signal SIGABRT, Aborted.
__GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:51
51 ../sysdeps/unix/sysv/linux/raise.c: No such file or directory.
(gdb) bt
#0 __GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:51
#1 0x00007ffff705b801 in __GI_abort () at abort.c:79
#2 0x0000000000508a2e in uv__io_poll (loop=0x74e860 <default_loop_struct>, timeout=-1)
at iotjs/deps/libtuv/src/unix/linux-core.c:234
#3 0x00000000004fc08d in uv_run (loop=0x74e860 <default_loop_struct>, mode=UV_RUN_ONCE)
at iotjs/deps/libtuv/src/unix/core.c:327
#4 0x0000000000416837 in iotjs_start (env=0x74e680 <current_env>) at iotjs/src/iotjs.c:192
#5 0x0000000000416b17 in iotjs_entry (argc=2, argv=0x7fffffffdd68) at iotjs/src/iotjs.c:269
#6 0x00000000004162b7 in main (argc=2, argv=0x7fffffffdd68) at iotjs/src/platform/linux/iotjs_linux.c:19
Found by Fuzzinator with JsProFuzz.